Antwort: Monitor Services on Windows machines

Hi,

there are two ways to go:

1.: Use one of the standard systems management solutions - I'd recommend netIQ, Tivoli or bmc as (quite) huge solutions with loads of functionality. Extremly expensive just for this purpose ;)

2.: Do it "Your Way". Use the built in Windows alerting and notification services, use wsh/csh and VBScript to do this job just for the amount of time you need (apprx. 2 days) Or use any other scripting language of your favour (Perl, PHP, whatsoever)

Solution "My Way" (quick 'n dirty):

1. Either try to Configure "Performance and Warnings" (may have a different Name - I'm working on a german Win2k) to automatically send you an alert whenever a defined (known) process stops existing - this will work only, if you know exactly the name of the process (won't work with svchost.exe) or schedule a VBScript which is simply looking for a named service and delivers a defined return value for example '0' if the service is up and running and '1' if it has not been found (assuming that this means the service has stopped)
2. Schedule a second script that sends you an alert corresponding to the return value of your VBScript(s). This would also be the place to automatically restart the monitored script, anyway I would do such things only after a period of life testing ;)

Mit freundlichem Gruß

Daniel Atencio

Systems-Management Consulting
ACT IT-Consulting & Services AG
Rudolf-Diesel-Straße 18
53859 Niederkassel

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Telefon: (0228) 97 125-0
Telefax: (0228) 97 125-42
Mobil: (0177) 813 25 06
atencio@act-online.de

MOHESOWA BYAS <byasmohesowa@sbm.intnet.mu> 21.02.2003 10:29  

        An:     focus-ms@securityfocus.com
        Kopie: 
        Thema:  Monitor Services on Windows machines

Hi,
Is there a way to monitor if services on Win 2K Professional machines have been stopped or started? Can monitoring be done remotely?

Aim is to monitor that users do not shutdown or start services that they are
not supposed to.

Thanks & Regards

###########################################

This message has been scanned by F-Secure Anti-Virus for Microsoft Exchange.
For more information, connect to http://www.F-Secure.com/ Received on Tue Feb 25 12:57:36 2003